Skip to main content
NetApp Knowledge Base

Search

  • Filter results by:
    • View attachments
    Searching in
    About 8 results
    • Unable to create a volume after removing NetApp Volume Encryption (NVE): Error: ONTAP API Failed: Key manager is not configured on the cluster
      https://kb.netapp.com/on-prem/ontap/DM/Encryption/Encryption-KBs/Error__ONTAP_API_Failed__Key_manager_is_not_configured_on_the_cluster
      Applies to ONTAP 9.1 and above NetApp Volume Encryption (NVE) Onboard Key Manager Issue Unable to create volumes after removing NVE from the cluster Error: "ONTAP API Failed: Key manager is not config...Applies to ONTAP 9.1 and above NetApp Volume Encryption (NVE) Onboard Key Manager Issue Unable to create volumes after removing NVE from the cluster Error: "ONTAP API Failed: Key manager is not configured on the cluster"
    • Timeout error when disabling OKM
      https://kb.netapp.com/on-prem/ontap/DM/Encryption/Encryption-KBs/Timeout_error_when_disabling_OKM
      Applies to ONTAP 9.7P3 FAS80xx NetApp Volume Encryption (NVE) Onboard Key Manager (OKM) Issue Trying to disable OKM will fail with the following error: security key-manager onboard disable :: Error: I...Applies to ONTAP 9.7P3 FAS80xx NetApp Volume Encryption (NVE) Onboard Key Manager (OKM) Issue Trying to disable OKM will fail with the following error: security key-manager onboard disable :: Error: Internal error. Failed to determine if keymanager is safe to disable. Reason: Timeout: Operation "keymanager_encrypted_core_check_iterator::create_imp()" took longer than 25 seconds to complete [from mgwd on node "cluster01-01" (VSID: -1) to mgwd at 169.254.xx.xxx].
    • OKM keys not restored after ONTAP cluster expansion
      https://kb.netapp.com/on-prem/ontap/DM/Encryption/Encryption-KBs/OKM_keys_not_restored_after_ONTAP_cluster_expansion
      Run the "security key-manager onboard sync" command to restore the onboard key hierarchy on those nodes. If using an external key manager, use the 'security key-manager external show-status' command t...Run the "security key-manager onboard sync" command to restore the onboard key hierarchy on those nodes. If using an external key manager, use the 'security key-manager external show-status' command to verify that the network configuration is correct and the key servers are reachable. If using the Onboard Key Manager, use the 'security key-manager key query -key-type SVM-KEK' command to verify that the same SVM-KEKs are present on both the local and remote clusters.
    • One or more nodes have onboard key management VEK keys that need to be restored
      https://kb.netapp.com/on-prem/ontap/Ontap_OS/OS-KBs/One_or_more_nodes_have_onboard_key_management_VEK_keys_that_need_to_be_restored
      See Solution when Command security key-manager key query shows that some of the VEK keys not restored. One or more nodes have onboard key management VEK keys that need to be restored.
    • Package "MT_EK_MGMT" is not licensed in the cluster
      https://kb.netapp.com/on-prem/ontap/Ontap_OS/OS-KBs/Package_MT_EK_MGMT_is_not_licensed_in_the_cluster
      When trying to enable external key-manager, the following error is received: Error: command failed: Package "MT_EK_MGMT" is not licensed in the cluster. Error: command failed: Failed to dry-run anti-r...When trying to enable external key-manager, the following error is received: Error: command failed: Package "MT_EK_MGMT" is not licensed in the cluster. Error: command failed: Failed to dry-run anti-ransomware on volume "vol1" in Vserver "svm1". Reason: Failed to enable anti-ransomware. Reason: Package "MT_EK_MGMT" is not licensed in the cluster. Install the Anti-ransomware license from the Security and Compliance Bundle using the "system license add -license-code <license-code>" command.
    • How to configure NetApp Volume Encryption
      https://kb.netapp.com/on-prem/ontap/DM/Encryption/Encryption-KBs/How_to_configure_NetApp_Volume_Encryption
      Procedure to encrypt a volume with NetApp Volume Encryption (NVE). NVE helps customers to use software-based, volume-level encryption to encrypt the data-at-rest, for data volumes.
    • Is it possible to tune NetApp Volume Encryption conversion/rekey process?
      https://kb.netapp.com/on-prem/ontap/DM/Encryption/Encryption-KBs/Is_it_possible_to_tune_the_NetApp_Volume_Encryption_conversion_rekey_process
      Article covers basic NetApp Volume Encryption (NVE) questions when using volume encryption conversion and volume encryption rekey commands to convert an existing volume from unencrypted to encrypted o...Article covers basic NetApp Volume Encryption (NVE) questions when using volume encryption conversion and volume encryption rekey commands to convert an existing volume from unencrypted to encrypted or rekey an existing encrypted volume. Two volume conversions and two volume encryption moves on a single node are within the recommendation, but four volume conversions and four volume encryption moves on a single node would not be recommended.
    • How to determine which External Key Managers are supported by ONTAP
      https://kb.netapp.com/on-prem/ontap/OHW/OHW-KBs/How_to_determine_which_External_Key_Managers_are_supported_by_ONTAP
      External Key Management (EKM) Interoperability Matrix Tool (IMT) is used to verify that specific versions of hardware, firmware, and software are supported to run different NetApp technologies. IMT co...External Key Management (EKM) Interoperability Matrix Tool (IMT) is used to verify that specific versions of hardware, firmware, and software are supported to run different NetApp technologies. IMT contains configuration entries for all supported External Key Managers. In the Solution Catalog section, type in Key Click on Key Managers to add it as a selected solution Click blue symbol to see which Key Manager and Key Manager software versions are supported See Configuring external key management